This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323134303235.roa File: 3231372e3231362e3230342e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 9RfVMA3n+AYyC0D3nC+1AksRRmI0S76BtMXsdIniT+o= Subject key identifier: 2B:B4:F8:0F:B3:B7:AE:9A:F8:F0:C8:00:29:AE:70:F7:12:C5:4D:EC Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 391898CF44D299539CAB5B0C9770621A78C2F194 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323134303235.roa Signing time: Sat 24 Jan 2026 12:36:50 +0000 ROA not before: Sat 24 Jan 2026 12:31:50 +0000 ROA not after: Sat 23 Jan 2027 12:36:50 +0000 asID: 214025 IP address blocks: 217.216.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:18:98:cf:44:d2:99:53:9c:ab:5b:0c:97:70:62:1a:78:c2:f1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:31:50 2026 GMT Not After : Jan 23 12:36:50 2027 GMT Subject: CN=2BB4F80FB3B7AE9AF8F0C80029AE70F712C54DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:ba:5e:20:1c:a7:d7:38:45:9c:a9:f8:65: ed:18:54:f7:8a:68:49:e1:95:83:ee:12:a5:96:6b: 19:0c:fe:ac:c4:02:25:20:2c:07:91:e1:46:cd:20: 16:85:79:dc:4e:f2:2c:c3:95:10:6b:0c:ea:52:53: 3d:5d:f5:58:05:20:eb:a9:e2:24:e0:f7:d2:7e:10: c1:07:93:28:d0:10:9c:44:89:27:ae:2f:8e:ab:bd: cf:5c:e2:f0:38:3b:97:83:17:05:b0:0a:c9:52:fa: ac:2f:7a:18:59:d4:6e:6d:35:1c:87:15:76:1a:72: 89:e5:bb:d9:c8:b6:10:de:1e:b3:30:70:0a:93:09: 32:13:5c:d2:b6:59:7f:16:3f:b6:81:66:5b:8a:64: bc:61:18:37:56:77:18:8e:ec:fb:f3:9a:5a:d9:07: a5:ed:1d:85:8d:02:ac:9a:a3:90:6d:1f:32:3f:c3: 4a:a9:fa:17:84:85:ec:30:04:d9:38:ff:ef:35:23: 9c:46:86:d2:2b:2b:ce:e8:af:fa:ba:96:38:00:75: 9a:56:32:0d:13:6e:26:4a:fd:b0:a0:19:0a:99:f8: 57:50:67:c6:92:64:39:c7:53:52:2a:fb:e7:93:2e: e7:e3:d3:19:e2:91:4e:a5:fb:59:50:62:01:e6:c4: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B4:F8:0F:B3:B7:AE:9A:F8:F0:C8:00:29:AE:70:F7:12:C5:4D:EC X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.204.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f3:26:e9:f2:84:b9:d3:c5:54:e7:89:f1:cd:f3:49:2e:93: 0d:6b:1b:b9:ea:46:7c:5c:9d:50:80:f4:3f:40:e3:d2:e8:02: a1:d0:ac:4d:9d:97:9f:43:9a:45:b7:2a:d3:24:56:68:78:c5: d7:86:2e:59:d0:fb:9f:e5:7d:6f:8f:d9:56:72:a3:6b:ae:a5: 94:fb:32:0f:b7:2f:92:c0:b0:b0:a2:52:9d:89:7f:c1:08:e5: 8d:7a:6c:68:f6:45:05:6a:e8:2a:1b:05:cf:95:59:6b:81:32: 1f:e6:27:f4:80:6b:f8:23:bd:66:9f:b0:75:d8:51:23:90:bd: e8:e4:5c:cb:71:25:99:28:41:f3:07:24:14:71:cd:52:cc:4a: 6e:fe:0e:12:54:c4:e7:b3:54:83:d8:bf:aa:da:bd:9a:de:ce: 1f:bb:a8:4f:72:a1:c0:14:11:5f:b7:78:20:ff:c6:0c:e1:87: b4:29:24:3b:87:8c:25:9d:d6:7b:32:95:8f:d0:e8:4f:7f:40: 3a:30:c8:35:ff:f7:37:69:3b:09:eb:e3:e5:6d:50:e3:6e:bd: f0:2c:cb:ce:2c:37:6c:b1:2e:c0:32:e6:6c:39:81:d1:b7:d5: f6:2a:99:cf:fa:f1:30:6f:24:c7:5c:72:09:8c:29:13:4b:2b: 1e:1e:4c:96 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUORiYz0TSmVOcq1sMl3BiGnjC8ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMxNTBaFw0yNzAxMjMxMjM2NTBaMDMxMTAvBgNV BAMTKDJCQjRGODBGQjNCN0FFOUFGOEYwQzgwMDI5QUU3MEY3MTJDNTRERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGrpeIByn1zhFnKn4Ze0YVPeK aEnhlYPuEqWWaxkM/qzEAiUgLAeR4UbNIBaFedxO8izDlRBrDOpSUz1d9VgFIOup 4iTg99J+EMEHkyjQEJxEiSeuL46rvc9c4vA4O5eDFwWwCslS+qwvehhZ1G5tNRyH FXYaconlu9nIthDeHrMwcAqTCTITXNK2WX8WP7aBZluKZLxhGDdWdxiO7PvzmlrZ B6XtHYWNAqyao5BtHzI/w0qp+heEhewwBNk4/+81I5xGhtIrK87or/q6ljgAdZpW Mg0TbiZK/bCgGQqZ+FdQZ8aSZDnHU1Iq++eTLufj0xnikU6l+1lQYgHmxGZ1AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUK7T4D7O3rpr48MgAKa5w9xLFTewwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANnYzDANBgkqhkiG9w0BAQsFAAOCAQEAZfMm6fKEudPFVOeJ8c3zSS6TDWsb uepGfFydUID0P0Dj0ugCodCsTZ2Xn0OaRbcq0yRWaHjF14YuWdD7n+V9b4/ZVnKj a66llPsyD7cvksCwsKJSnYl/wQjljXpsaPZFBWroKhsFz5VZa4EyH+Yn9IBr+CO9 Zp+wddhRI5C96ORcy3ElmShB8wckFHHNUsxKbv4OElTE57NUg9i/qtq9mt7OH7uo T3KhwBQRX7d4IP/GDOGHtCkkO4eMJZ3WezKVj9DoT39AOjDINf/3N2k7Cevj5W1Q 42698CzLziw3bLEuwDLmbDmB0bfV9iqZz/rxMG8kx1xyCYwpE0srHh5Mlg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:26 2026 by rpki-client